Malicious Apps on the Google Play Store are really unstoppable. Following the discovery in March that a number of Apps contained Trojans, a security company recently found 5 Apps with malicious code that steal websites commonly used by users Login information, and the number of downloads has exceeded 2 million, which means that many users have won the bid. If you have downloaded, remember to delete it as soon as possible.
(Image credit: bleepingcomputer)
5 malicious apps found on Google Play Store with over 2 million downloads
Recently, Dr.WEB, a foreign network security research company, published an article that found that there are several malicious advertising apps in the Google Play Store, as well as malicious apps that steal data. The latter can be said to be especially careful, because these malicious apps will steal your frequently used websites. login credentials, including: social platforms, online banking, mailboxes, etc., and try to take over your account.
The report also mentioned that these two malicious apps are one of the most dangerous Android threats in May 2022, and the following five can still be used at the moment of writing:
- PIP Pic Camera Photo Editor – 1 million downloads, malicious app masquerading as photo editing software that steals users’ Facebook account credentials.
- Wild & Exotic Animal Wallpaper – 500,000 downloads, this is an app with a built-in ad trojan that changes the icon and name to “SIM Kit” and automatically adds it to the list of battery saving exceptions.
- ZodiHoroscope – Fortune Finder – with 500,000 downloads, this malicious app will steal Facebook account credentials by asking users to enter their Facebook account login information through a decoy process. It is understood that this decoy process appears to be to disable ads in the app.
- PIP Camera 2022 – 50k downloads, a camera filter app and a Facebook account stealing app.
- Magnifier Flashlight – 10,000 downloads, an adware application with video and static banner ads.
User reviews of PIP Pic Camera Photo Editor have many complaining that there is no editing function, and some people say that it will ask to log in to Facebook:
I just checked that these apps have all been deleted. If you want to know what the icons of these Apps look like, you can click me to jump to the Dr.WEB report.
In addition to these 5 models, Dr.WEB also found other problematic apps, such as the “Recovery” data recovery application and the “Driving Real Race” game, which would induce users to use paid subscription services, but it didn’t take long to find out was removed by Google: